
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json)
Hash identifier: Qaa7Ml+m6cu59HUeRrT+LknEoqB7BErSN3Fz3MInRqg=
Subject key identifier: F1:7D:F6:A8:6E:E6:72:6C:C1:66:A4:AD:AA:A6:0A:6C:82:49:8E:74
Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701
Certificate serial: 3FCCD7B4D0DFD55B73DF71152002D5B24FF6691B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
Manifest number: 0100
Signing time: Tue 28 Jul 2026 19:12:35 +0000
Manifest this update: Tue 28 Jul 2026 19:07:35 +0000
Manifest next update: Wed 29 Jul 2026 21:16:35 +0000
Files and hashes: 1: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: rFTNTWWSJaKNwnNZ8qKQ7BASZ9byBaMUVngcVUf0fzQ=)
2: 3133382e3235322e37322e302f32342d3234203d3e20313337373331.roa (hash: UQKPf2S3sGHCJlse2YLd/IC42+k7YICa9NGSQPIobpw=)
3: 3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa (hash: BYAXVTxfgLWzT4RgbXwqdG0dnJo1tFwF8NnGu6h4glA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cc:d7:b4:d0:df:d5:5b:73:df:71:15:20:02:d5:b2:4f:f6:69:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701
Validity
Not Before: Jul 28 19:07:35 2026 GMT
Not After : Jul 29 21:16:35 2026 GMT
Subject: CN=F17DF6A86EE6726CC166A4ADAAA60A6C82498E74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:7f:ac:50:b4:1a:5e:c0:df:ab:99:53:9a:
72:03:5d:50:bf:a0:b2:d1:f0:32:3d:2a:fe:d3:15:
99:62:af:ca:98:96:0d:b9:06:bd:29:aa:2b:f9:7a:
7f:6d:8e:fa:61:f8:df:63:fd:11:d9:cb:6d:d5:74:
9f:e3:6c:42:0e:60:3e:01:bb:c4:d3:65:ec:5e:89:
15:e0:b4:18:64:e4:39:62:ae:37:99:82:8a:a8:de:
ee:de:07:ce:d2:f5:4f:18:ea:ef:bb:a6:a9:9b:9e:
57:ef:2a:22:4e:77:53:55:7b:b5:15:6e:c6:c1:69:
2e:fc:58:30:18:e6:71:39:71:96:ee:c2:87:2c:73:
09:8b:ab:91:b9:05:9c:5e:fa:d7:1c:27:c9:20:10:
73:ae:1a:44:0d:f9:81:05:7e:ce:6c:25:2f:51:18:
0c:99:16:f2:ab:bb:7c:34:42:40:66:90:7d:5c:ad:
4d:98:5f:57:f9:8f:fb:bd:7d:fe:a0:59:4c:53:3a:
c3:ea:bd:ed:04:d2:8c:77:14:d4:97:f7:bf:68:ef:
6f:87:59:49:82:1f:de:ae:86:79:fe:5e:83:d9:1e:
12:a3:55:b1:97:5d:b4:de:13:cf:27:3b:27:b8:7b:
d0:c8:6e:32:b1:11:11:3d:44:8a:ab:d7:1c:65:12:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7D:F6:A8:6E:E6:72:6C:C1:66:A4:AD:AA:A6:0A:6C:82:49:8E:74
X509v3 Authority Key Identifier:
keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:61:87:bc:cf:7e:8c:c5:fa:3a:c1:9e:77:ae:d5:06:74:4e:
a7:78:e9:e2:14:9c:5d:62:a8:f0:e6:74:58:1e:8d:67:62:f4:
9f:28:68:eb:26:69:c9:8f:f4:c9:26:0a:a9:4a:9e:69:88:59:
bc:c0:b8:d0:0d:b4:c3:95:27:7a:03:08:31:2a:f8:a8:a2:2f:
2d:66:ed:22:17:09:e2:5e:2a:f8:04:2a:ab:20:42:b7:09:4f:
09:7f:80:00:76:b0:93:91:10:90:e9:ac:5b:e2:bd:30:41:62:
4d:8c:52:90:af:32:71:af:5e:23:18:37:a8:4f:0a:a8:ce:12:
ff:cf:7d:93:6c:a0:07:e8:9f:7c:75:bc:38:b3:1c:ee:77:86:
db:01:42:d0:cf:75:c6:84:fe:95:b5:62:db:53:5c:62:69:51:
3d:ff:bc:5e:6d:1a:a6:18:88:51:f4:dd:ed:38:7a:ee:3e:af:
aa:c7:f4:f7:2b:5d:5d:22:6a:e5:67:22:21:86:96:9d:89:73:
69:f0:1d:03:55:ee:b2:c1:29:d6:22:af:af:27:3d:21:ae:9a:
53:6b:93:6f:94:0a:87:60:96:59:a5:8c:22:92:40:4e:47:4c:
8b:d2:f3:5b:40:67:46:62:0f:9f:45:ac:20:6c:c2:96:7d:b6:
e4:41:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:48:34 2026 by rpki-client